Believer. Beard. Coffee. Tech. Youtube. Check the link in my bio to see my latest video!
Dallas, TX
Joined March 2016
- Tweets5.4K
- Following842
- Followers273K
- Likes3.6K
Pinned Tweet
We were at DEF CON and found child predators just around us. We chatted with one. Hackers, listen up. We need your help. Watch the interview with @0dayCTF (link in the reply)
The #1 Danger Isn't Roblox
Ryan Montgomery on the #1 thing parents get wrong about protecting kids from online predators.
Check out the FULL VIDEO here: youtu.be/5wZUwZWxMLQ
Rule of thumb for MOST of you right now ———-> don’t expose anything to the internet.
- Close all those ports
- Put everything behind a firewall
- Use VPN for access
Keep coding all that personal software but keep your attack surface small.
Windows doesn't save your real password... it saves an NTLM hash.
Grab that hash, feed it into a password cracker (like Hashcat), and crack it back into plain text
-----> Watch how easy it is to grab that hash.
You are going to walk into a business and face technical issues that neither you nor AI have ever seen before.
It's getting more intense!!
For you on the frontlines, how's it looking?
I know it sucks to wake up with your hair on fire. Praying for ya'll.
🚨 Nightmare day for cybersecurity
Multiple major security incidents, active exploits, supply chain compromises...
If you run production systems, start patching NOW.
PHP: Two critical unauthenticated RCEs. Attackers already exploiting them. Patch NOW
LiteLLM: v1.107.0 on PyPI and Docker is BACKDOORED. Steals cloud, SSH, and AI credentials. Pin 1.106.2. Rotate secrets.
eMudhra: A certificate authority's keys were crackable. Update your browsers, systems, and trust stores.
Node.js / Next.js / React: Security releases for Brotli RCE, TLS bypasses, and TWO critical Next.js RCEs.
TiDB Cloud: PingCAP breached through stolen credentials. Customer information and other sensitive data exfiltrated. Read the attacker's release, fun stuff.
Plex2Shell: Weaponized within HOURS of the PoC. Attackers already deploying cryptominers and proxy backdoors.
BeyondTrust / Ivanti: Actively exploited zero-days added to CISA's KEV catalog. BeyondTrust attacks linked to a China-nexus campaign.
And that's not even the full list.
Patch. Audit. Rotate. NOW.
Want to hide yourself and become anonymous while hacking? -----> Use Proxy Chaining
#EthicalHacking
I got hacked, we found a predator 80 feet away....this was a crazy interview with @0dayCTF (link in the reply)
Hackers are using AI to find bugs and write exploits faster than you can patch them.
My friends at @wiz_io made a free playbook for keeping up.
Grab it here
ntck.co/WizAIPlaybook
#ad
Ever wondered where the Internet actually lives? The Dallas Infomart and Equinix DA11! 🌐
——-> I got access inside this massive data center to see how they cool millions of server, an entire room packed wall-to-wall with high-powered GPUs.
Watch the full video to discover everything I learned there! 👇
youtu.be/v477fvbj3rk?si=2OKx…
Why do I have 6 different VLANs at my house? simple answer is........ SECURITY!
I don't let everyone on one massive network. ——-> I use /24 subnets to lock things down! 💻
- One VLAN for my employees 👥
- A totally separate VLAN for my servers 🖥️
They CANNOT talk to each other unless I say so! VLANs give you the ultimate boundary to set rules on who can access what and control internet traffic.
Dang, seems like @opencode got hacked. Change your keys!
Flushing the toilet kills our network!
What would you make your AI agents investigate?
Go watch the FULL VIDEO here: youtu.be/7RVf25Rg0Mc
